3 ms·
Thanks - I missed the DHE optimizations, and it's really nice to see that these improvements were immediately fed back into OpenSSL.
by ominous_prime 15y ago
Thanks - I missed the DHE optimizations, and it's really nice to see that these improvements were immediately fed back into OpenSSL.
- stock_toaster 15y agoThe post made it sound like just the bugfixes are in 1.0.0e, but the performance improvements may have not been accepted yet. I wonder if that is the case? This is good to see, and I really appreciate the work google has put into making tls/ssl more pervasive. I do wonder about the performance differences between their faster DHE implementation and what they were using before (RSA-RC4-SHA). I wish they had provided a bit of data on that.
- tptacek 15y agoIt kind of has to be less performant, just because ECDHE uses more bignum crypto primitives.
- stock_toaster 15y agoYeah, that makes sense. I was mostly curious about how much faster their new implementation was over the old, and how much slower it was than RSA-RC4-SHA.
- marshray 15y agoI think that with the session resumptions they got by using session tickets, this could easily end up being a net gain for them.